After accepting and assigning a positive risk, risk owners have a responsibility to:

A. maximize the probability.
B. update the risk register.
C. minimize the impact.
D. determine a mitigation strategy.